Risk und Performance Management in Stürmischen Zeiten mit Oracle GRC

Oracle Applications Day Zürich, 1. Juli 2009 Risk und Performance Management in Stürmischen Zeiten mit Oracle GRC Steven Hagner EMEA GRC Sales Organization 1 Safe Harbor Statement The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decision. The development, release, and timing of any features or functionality described for Oracle’s products remains at the sole discretion of Oracle. 2 Agenda • Business Challenges • Solution Overview • Customer Success 3 Fraud on the Rise Societe Generale lost €6.3B as B. Ramalinga Raju reveals Jerome Kerviel went rogue falsifying $1B Corp. account Siemens agrees to pay $1.3B Fannie Mae IT contractor in bribery settlement indicted for planting malware 4 Call for Increased Regulatory Scrutiny Obama Gordon Sarkozy Jintao AMERICAS EMEA APAC • HIPAA • EU Privacy Directives • J-SOX, C-SOX, K-S0X, C49 • FDA CFR 21 Part 11 • UK Companies Law • CLERP 9: Audit Reform and • OMB Circular A-123 • Restriction of Hazardous Corporate Disclosure Act • SEC and DoD Records Substances (ROHS/WEE) (Australia) Retention • Stock Exchange of Thailand • USA PATRIOT Act GLOBAL Code on Corporate • Gramm-Leach-Bliley Act • International Accounting Standards Governance • Federal Sentencing Guidelines • Basel II (Global Banking) • Foreign Corrupt Practices Act • OECD Guidelines on Corporate • Market Instruments 52 (Canada) Governance 5 The Big Picture What is Governance, Risk, and Compliance Boundary defined by management including public commitments, Voluntary Boundary organizational values, contractual obligations, and other voluntary policies Obstacles Business Model Obstacles Objectives Strategy, people, process, impede progress Strategic, operational, technology and toward achieving customer, compliance and infrastructure in place to objectives reporting objectives cascaded drive toward objectives throughout the organization Boundary established by external forces including laws, government Mandated Boundary regulation and other mandates. © OCEG 6 Governance, Risk & Compliance • Governance is the process of deciding and documenting how the organization operates. • Risk Management is the process of ensuring that the right levels of risk are taken. • Compliance is the process of ensuring and proving that policies (internal and external) are being followed. 7 While Cost of Compliance Continues to Rise $32Billion $29Billion “Governance, risk management, and compliance (GRC) spending will exceed “Governance, risk management, and compliance (GRC) spending will exceed $32B for 2008, up 7.4% from 2007, as companies shift toward identifying, $32B for 2008, up 7.4% from 2007, as companies shift toward identifying, assessing, and managing risk across numerous business and IT areas.” assessing, and managing risk across numerous business and IT areas.